Privacy Policy
Effective Date: 9 May 2026
1. About Us
Kvastram is a handmade fashion brand based in Jaipur, Rajasthan, India. We sell handmade kantha quilts, block-print clothing, artisan bags, sarees, jackets, tote bags, and related handcrafted products through https://kvastram.com.
Kvastram was previously known as KanthaPrints on Etsy and now operates independently.
For privacy matters, you can contact us at:
Kvastram
Jaipur, Rajasthan, India
Website: https://kvastram.com
Email: support@kvastram.com
Support hours: Monday to Friday, 9:00 am to 6:00 pm IST
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, place an order, contact us, subscribe to updates, or interact with us online.
We comply with applicable Indian privacy and data protection laws, including the Information Technology Act, 2000 as amended in 2008, applicable Information Technology rules, and the Digital Personal Data Protection Act, 2023. Where applicable, we also comply with the EU General Data Protection Regulation and the UK GDPR for customers located in the European Union, European Economic Area, and United Kingdom.
2. Information We Collect
We collect information that you provide directly to us and information collected automatically when you use our website.
Information you provide directly may include:
- Full name
- Email address
- Phone number
- Billing address
- Shipping address
- Order details
- Payment-related information
- Customer support messages
- Product reviews or feedback
- Marketing preferences
- Account login details, if you create an account
- Any other information you choose to provide when contacting us
We do not store your full credit card, debit card, UPI, PayPal, Stripe, Razorpay, or bank account details on our own systems. Payments are processed securely by our payment partners.
Information collected automatically may include:
- IP address
- Device type
- Browser type
- Operating system
- Pages viewed
- Products viewed
- Time spent on the website
- Referring website or campaign
- Approximate location based on IP address
- Cookie identifiers
- Shopping cart activity
- Interaction with emails, ads, or website features
We may collect this information through cookies, pixels, server logs, analytics tools, and similar technologies.
3. How We Use Your Information
We use your personal information only for lawful and necessary business purposes connected with running Kvastram, processing orders, improving our services, and communicating with you.
Where the GDPR or UK GDPR applies, we rely on the lawful bases listed below. Where Indian law applies, including the DPDP Act, we process personal data based on consent, voluntary provision of data for a specified purpose, legitimate uses permitted by law, legal obligations, and other lawful grounds available under applicable law.
| Purpose | Lawful Basis |
|---|---|
| To process and deliver your orders | Performance of contract; consent; specified purpose under DPDP |
| To process payments | Performance of contract; legal obligation; fraud prevention |
| To send order confirmations and updates | Performance of contract; legitimate interest |
| To arrange shipping and delivery | Performance of contract; specified purpose under DPDP |
| To provide customer support | Performance of contract; legitimate interest; consent |
| To manage returns, refunds, and complaints | Performance of contract; legal obligation; legitimate interest |
| To create and manage customer accounts | Performance of contract; consent |
| To personalize your shopping experience | Legitimate interest; consent where required |
| To send marketing emails or offers | Consent; legitimate interest where permitted by law |
| To show ads on Google, Facebook, Instagram, and similar platforms | Consent where required; legitimate interest where permitted |
| To measure website traffic and performance | Legitimate interest; consent where required |
| To prevent fraud and protect our website | Legitimate interest; legal obligation |
| To comply with tax, accounting, customs, and legal requirements | Legal obligation |
| To respond to legal requests or disputes | Legal obligation; legitimate interest |
| To improve products, website design, and customer experience | Legitimate interest |
You can withdraw consent for marketing or optional cookies at any time. Withdrawal of consent will not affect processing already completed before withdrawal.
We do not sell, rent, or share your personal information for third-party marketing. We do not allow unrelated third parties to use your personal information to market their own products or services to you.
4. Sharing Your Information
We share personal information only when necessary to operate our business, fulfil your order, comply with law, protect our rights, or provide services you request.
We may share your information with the following categories of third parties:
- Payment processors, including Razorpay, PayPal, and Stripe
- Shipping and logistics partners, including India Post, FedEx, DHL, and Shiprocket
- Website hosting and technology service providers
- Email and customer support service providers
- Analytics providers, including Google Analytics
- Advertising and tracking platforms, including Meta Pixel for Facebook and Instagram ads
- Fraud prevention and security service providers
- Accounting, tax, legal, and compliance advisers
- Customs authorities, import authorities, postal authorities, and regulators where required for international shipping
- Government authorities, courts, law enforcement, or regulators where required by law
- Business transferees if Kvastram is involved in a merger, acquisition, restructuring, or sale of business assets
These service providers are allowed to use personal information only as needed to provide services to us or comply with legal requirements. We require them to handle personal information securely and in accordance with applicable law.
We do not sell, rent, or share user data for third-party marketing.
5. Cookies & Tracking Technologies
We use cookies, pixels, tags, local storage, and similar tracking technologies to operate our website, understand how visitors use it, improve performance, remember preferences, and support advertising.
Types of cookies we use include:
Essential cookies
These are required for the website to work properly. They help with shopping cart functions, checkout, account login, payment security, fraud prevention, and website stability. You cannot disable essential cookies through our cookie tools because the website may not function without them.
Analytics cookies
These help us understand how visitors use our website, which pages are popular, which products are viewed, and how we can improve the shopping experience. We may use Google Analytics for this purpose.
Marketing cookies
These help us measure advertising performance and show relevant ads on platforms such as Facebook, Instagram, and Google. We may use Meta Pixel and similar tools for this purpose.
Preference cookies
These remember choices such as region, currency, language, or other website preferences where available.
You can manage cookies through your browser settings. In some regions, you may also see a cookie banner or consent tool that lets you accept, reject, or manage non-essential cookies.
If you block cookies, some parts of the website may not work properly.
6. Data Retention
We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
| Data type | Retention period |
|---|---|
| Order records, invoices, billing details, and tax records | Up to 8 years or longer if required by tax, accounting, customs, or legal rules |
| Customer account information | Until the account is deleted or inactive, then up to 3 years unless needed for legal or order records |
| Shipping information | Up to 8 years where linked to order, customs, tax, or delivery records |
| Payment transaction records | Up to 8 years for accounting, fraud prevention, chargebacks, and legal compliance. We do not store full card details |
| Customer support messages | Up to 3 years after the last interaction, unless needed for a dispute or legal matter |
| Marketing subscription records | Until you unsubscribe or withdraw consent, plus a limited suppression record to ensure we do not contact you again |
| Cookie and analytics data | Usually up to 26 months, unless a shorter or longer period is set in the relevant tool |
| Advertising and pixel data | According to the settings of the relevant advertising platform and your consent choices |
| Security logs and fraud prevention records | Up to 12 months, or longer if needed to investigate misuse, fraud, or security incidents |
| Legal claims and dispute records | Until the claim or dispute is resolved and any legal limitation period has expired |
When personal information is no longer needed, we delete it, anonymize it, or securely archive it where deletion is not immediately possible.
7. Your Rights
Depending on where you live and which law applies, you may have the following rights regarding your personal information:
Right to access
You can ask us for a copy or summary of the personal information we hold about you.
Right to correction
You can ask us to correct inaccurate or incomplete personal information.
Right to erasure
You can ask us to delete your personal information, subject to legal, tax, accounting, fraud prevention, shipping, or dispute-related retention requirements.
Right to portability
Where applicable, you can ask us to provide your personal information in a structured, commonly used, machine-readable format.
Right to object
Where applicable, you can object to processing based on legitimate interests, including certain analytics or marketing activities.
Right to withdraw consent
Where we rely on your consent, you can withdraw it at any time. This includes marketing emails and optional cookies.
Right to opt out of marketing
You can unsubscribe from marketing emails by using the unsubscribe link in the email or by contacting us at support@kvastram.com.
Right to grievance redressal
Under Indian law, you may contact us to raise a privacy complaint or grievance. We will review and respond in accordance with applicable law.
Right to nominate under the DPDP Act
Where the Digital Personal Data Protection Act, 2023 applies, you may have the right to nominate another individual who may exercise your rights in the event of your death or incapacity, as permitted by law.
Right to complain to a regulator
If you are in the EU, EEA, or UK, you may have the right to complain to your local data protection authority. In India, you may have rights before the applicable Data Protection Board or other authority once available under law.
To exercise your rights, contact us at support@kvastram.com. We may ask you to verify your identity before responding to your request.
8. International Data Transfers
Kvastram is based in Jaipur, Rajasthan, India, and we sell to customers in India, the USA, the UK, the EU, Australia, and more than 50 countries.
When you order from outside India, your personal information may be processed in India and may also be shared with service providers, payment processors, shipping partners, analytics providers, advertising platforms, and technology providers located in other countries.
For EU, EEA, and UK customers, where personal data is transferred outside the EU, EEA, or UK, we use appropriate safeguards where required. These may include Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, contractual safeguards, technical safeguards, and transfer risk assessments where applicable.
We take steps to ensure that international transfers are handled securely and in accordance with applicable data protection laws.
9. Children's Privacy
Our website and products are intended for customers who are 18 years of age or older.
We do not knowingly collect personal information from children under 18. If you are under 18, you should not place orders, create an account, or provide personal information to us.
If we learn that we have collected personal information from a child under 18 without appropriate legal basis or required consent, we will delete it as soon as reasonably possible.
If you believe a child has provided personal information to us, please contact us at support@kvastram.com.
10. Security
We use reasonable technical and organizational safeguards to protect your personal information from unauthorized access, loss, misuse, alteration, or disclosure.
Our security measures may include:
- SSL encryption for website traffic
- Secure checkout through PCI-DSS compliant payment processors
- Access controls for systems that contain customer data
- Limited access to personal information by authorized personnel only
- Secure passwords and administrative controls
- Fraud monitoring and transaction security tools
- Regular review of website and service provider security practices
- Backups and reasonable steps to protect business records
Payment information is processed by Razorpay, PayPal, Stripe, or other secure payment providers. We do not store your full card details on our own systems.
No website, payment system, email system, or internet transmission is completely secure. However, we work to protect your personal information using reasonable and appropriate safeguards.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website, services, legal requirements, or privacy practices.
When we make changes, we will update the effective date at the top of this policy. If the changes are significant, we may provide additional notice on our website or by email where appropriate.
Your continued use of our website after an updated Privacy Policy is posted means you accept the updated policy, unless applicable law requires a different form of notice or consent.
12. Contact Us
If you have questions, requests, complaints, or concerns about this Privacy Policy or how we handle your personal information, please contact us:
Kvastram
Jaipur, Rajasthan, India
Website: https://kvastram.com
Email: support@kvastram.com
Support hours: Monday to Friday, 9:00 am to 6:00 pm IST
For privacy requests, please include your name, email address, order number if relevant, country of residence, and a clear description of your request. We will respond within the timeframe required by applicable law.